kernel: wifi: cfg80211: check A-MSDU format more carefully

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...

PT-2024-5614 · Provision Isr +2 · Sh-8100A-2L +5

Name of the Vulnerable Software and Affected Versions: TVT DVR TD-2104TS-CL affected versions not specified DVR TD-2108TS-HP affected versions not specified Provision-ISR DVR SH-4050A5-5LMM affected versions not specified AVISION DVR AV108T affected versions not specified TD-2116TE-HP affected...

ROS-20240723-03

Vulnerability of Ruby interpreter's Net::FTP class implementation is related to flaws in service data protection using the PASV command. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information. remotely, to gain unauthorized...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows attackers to perform spoofing attacks.

The vulnerability of the Windows operating system’s Network Authentication Protocol, NT LAN Manager NTLM, is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of Themes component in Windows operating systems, which allows attackers to carry out spoofing attacks

The vulnerability of Themes Windows themes in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of personal assistant Siri in operating systems iPadOS and iOS allows a hacker to disclose protected information.

The vulnerability of the personal assistant Siri in iPadOS and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-5095 · Ibm · Ibm Datacap Navigator

Name of the Vulnerable Software and Affected Versions: IBM Datacap Navigator versions 9.1.5 through 9.1.9 Description: The issue is related to insufficient protection of service data in the source code, allowing an authenticated user to obtain sensitive information that could be used in further...

CVE-2024-6037 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

PT-2024-4969 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A spoofing vulnerability affects the system, potentially allowing attackers to perform spoofing attacks due to a lack of protection of service data within the Windows NTLM authentication...

PT-2024-4981 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing affected versions not specified Description: The vulnerability is related to insufficient protection of service data in Microsoft Message Queuing, which can allow an attacker to disclose protected information. It...

PT-2024-7447 · Sap · Sap Landscape Management

Name of the Vulnerable Software and Affected Versions: SAP Landscape Management affected versions not specified Description: The issue is related to the REST Provider Definition response in SAP Landscape Management, which allows an authenticated user to read confidential data. This can cause a hi...

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system-based Cryptographic Services is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK allows attackers to disclose protected information.

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of FortiOS operating systems, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of FortiOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending specially crafted HTTP requests...

The vulnerability of the microprogramming software for Mitel series 6800, 6900, 6900w, and 6970 lies in the insufficient protection of operational data, allowing unauthorized access by intruders to the protected information.

The vulnerability of the microprogramming software of Mitel series 6800, 6900, 6900w, and 6970 is related to insufficient protection of service data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the `saslJaasServerRoleTokenSignerSecretPath` component in the cloud platform for distributed messaging and Apache Pulsar’s streaming communication allows a attacker to forge the SASL role token, thereby compromising the confidentiality and integrity of the protected information.

The vulnerability of the saslJaasServerRoleTokenSignerSecretPath component in the cloud platform for distributed messaging and Apache Pulsar streaming involves a lack of protection for service-related data. Exploiting this vulnerability could allow an attacker to forge the SASL role token and...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

PT-2024-3244 · Mitel · Mitel 6900 Series +3

Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series versions through 6.3 SP3 HF4 Mitel 6900 Series versions through 6.3 SP3 HF4 Mitel 6900w Series SIP Phone versions through 6.3.3 Mitel 6970 Conference Unit versions through 5.1.1 SP8 Description: The issue is related to...

PT-2024-3551 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.4.0 through 6.4.15 Fortinet FortiOS versions 7.0.0 through 7.0.15 Fortinet FortiOS versions 7.2.0 through 7.2.5 Fortinet FortiOS versions 7.4.0 through 7.4.1 Description: The issue is related to the exposure of...